This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/323830313a3137343a3a2f34342d3438203d3e20323731373830.roa
File:                     323830313a3137343a3a2f34342d3438203d3e20323731373830.roa (raw, json)
Hash identifier:          3RYErcH5CMzplfkgJZUvReGfpvtYD9FH/ICCFHqCyK0=
Subject key identifier:   FE:D3:0C:61:0B:38:06:BA:97:12:92:D7:49:61:F2:85:9E:9A:B9:97
Certificate issuer:       /CN=CD721CE88C796E837A067F6BF32EA1016FA71013
Certificate serial:       0B22525BE00DBA861B8E37E4663C030FA45960A0
Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/323830313a3137343a3a2f34342d3438203d3e20323731373830.roa
Signing time:             Tue 06 Jan 2026 20:56:21 +0000
ROA not before:           Tue 06 Jan 2026 20:51:21 +0000
ROA not after:            Tue 05 Jan 2027 20:56:21 +0000
asID:                     271780
IP address blocks:        2801:174::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:22:52:5b:e0:0d:ba:86:1b:8e:37:e4:66:3c:03:0f:a4:59:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013
        Validity
            Not Before: Jan  6 20:51:21 2026 GMT
            Not After : Jan  5 20:56:21 2027 GMT
        Subject: CN=FED30C610B3806BA971292D74961F2859E9AB997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:7a:fb:85:2b:98:84:e7:9c:5e:19:aa:3c:
                    ec:39:a5:e8:8a:33:24:ad:9c:87:23:7e:f5:2d:1d:
                    9f:10:32:c8:1a:a4:62:95:dd:05:06:86:f8:4c:c5:
                    71:1a:e4:44:72:ae:fd:78:da:67:11:c4:f5:92:79:
                    67:c6:88:71:df:28:64:1a:71:b7:d7:64:fa:03:56:
                    6d:1d:2c:15:f6:9a:51:c0:95:72:44:be:12:f9:e8:
                    e5:b0:50:32:b2:56:33:89:56:1f:e8:5b:db:50:5a:
                    c3:39:60:7d:a5:7c:36:19:ee:97:1b:4c:4f:6f:ef:
                    a7:76:bf:e6:0e:34:b0:73:a3:d9:36:6a:64:f9:c4:
                    2e:f3:a0:88:37:c8:b8:02:5e:ef:c6:90:ad:a8:a9:
                    66:3f:6a:0a:eb:aa:cd:c9:5f:90:70:05:d4:13:5b:
                    95:57:86:2f:86:85:e7:6a:d8:f8:36:e0:eb:8e:17:
                    ab:93:37:2a:3c:8e:7a:4c:cd:7f:59:09:23:ea:8d:
                    bc:98:99:7a:72:c1:a1:be:76:02:c6:b5:80:53:31:
                    00:77:a7:19:b3:bd:25:34:b3:b3:2a:ba:d8:c0:19:
                    be:11:ee:8d:f0:81:85:3e:ec:7e:48:89:f2:f6:be:
                    d3:95:e2:79:43:0b:a5:d2:a6:bb:c5:85:91:d6:c9:
                    73:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D3:0C:61:0B:38:06:BA:97:12:92:D7:49:61:F2:85:9E:9A:B9:97
            X509v3 Authority Key Identifier:
                keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/323830313a3137343a3a2f34342d3438203d3e20323731373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:174::/44

    Signature Algorithm: sha256WithRSAEncryption
         be:6b:a7:e3:dc:f5:a8:0b:59:7d:07:49:d1:89:fa:79:0a:58:
         9f:55:00:8f:3d:af:84:58:03:63:05:e8:0f:c9:47:95:c4:59:
         73:33:34:b0:2b:56:1a:ef:96:44:00:17:4e:60:80:65:bf:6d:
         ce:c9:c7:38:95:3b:a2:5f:5b:f1:b2:6e:92:b4:88:ca:18:4f:
         01:b9:49:62:94:40:dc:89:a1:d8:96:ce:d0:4b:b2:07:8c:43:
         16:25:d6:e8:e1:80:56:7f:4a:7a:ee:d5:91:97:e2:bf:78:3a:
         00:43:df:78:07:26:32:6a:01:64:d6:8d:c8:5d:75:83:f1:06:
         73:3b:9d:73:5b:cc:78:96:b9:30:7c:c8:ec:f7:de:0f:f4:71:
         ca:a2:12:5e:d1:b2:55:23:71:f5:2c:cb:8e:b4:f2:9a:65:2c:
         9e:e6:2a:84:de:9a:08:23:78:ec:9b:1e:01:09:9f:39:5b:44:
         0e:81:7f:68:9a:db:12:b8:dd:5d:f8:43:79:0b:c8:73:ad:0c:
         b4:aa:6b:45:ca:54:77:a7:af:2e:55:de:a7:a3:b3:d4:fb:36:
         f3:c6:d8:0e:bc:21:a7:25:1e:c9:39:c9:7a:2a:7b:2b:56:2d:
         a1:9a:0a:dd:f0:32:98:78:6f:f7:4d:6a:24:c1:f3:0a:da:15:
         ca:38:a3:c4
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCyJSW+ANuoYbjjfkZjwDD6RZYKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZCRjMyRUExMDE2
RkE3MTAxMzAeFw0yNjAxMDYyMDUxMjFaFw0yNzAxMDUyMDU2MjFaMDMxMTAvBgNV
BAMTKEZFRDMwQzYxMEIzODA2QkE5NzEyOTJENzQ5NjFGMjg1OUU5QUI5OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIHr7hSuYhOecXhmqPOw5peiK
MyStnIcjfvUtHZ8QMsgapGKV3QUGhvhMxXEa5ERyrv142mcRxPWSeWfGiHHfKGQa
cbfXZPoDVm0dLBX2mlHAlXJEvhL56OWwUDKyVjOJVh/oW9tQWsM5YH2lfDYZ7pcb
TE9v76d2v+YONLBzo9k2amT5xC7zoIg3yLgCXu/GkK2oqWY/agrrqs3JX5BwBdQT
W5VXhi+Ghedq2Pg24OuOF6uTNyo8jnpMzX9ZCSPqjbyYmXpywaG+dgLGtYBTMQB3
pxmzvSU0s7MqutjAGb4R7o3wgYU+7H5IifL2vtOV4nlDC6XSprvFhZHWyXO9AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU/tMMYQs4BrqXEpLXSWHyhZ6auZcwHwYDVR0j
BBgwFoAUzXIc6Ix5boN6Bn9r8y6hAW+nEBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRF
QzE0ODlDQkIwQ0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4
MzdBMDY3RjZCRjMyRUExMDE2RkE3MTAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDcyMUNFODhDNzk2RTgzN0Ew
NjdGNkJGMzJFQTEwMTZGQTcxMDEzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4MjM0NDdGMDA0RUMxNDg5Q0JC
MENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wLzMyMzgzMDMxM2EzMTM3MzQzYTNhMmYz
NDM0MmQzNDM4MjAzZDNlMjAzMjM3MzEzNzM4MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQF0AAAw
DQYJKoZIhvcNAQELBQADggEBAL5rp+Pc9agLWX0HSdGJ+nkKWJ9VAI89r4RYA2MF
6A/JR5XEWXMzNLArVhrvlkQAF05ggGW/bc7JxziVO6JfW/GybpK0iMoYTwG5SWKU
QNyJodiWztBLsgeMQxYl1ujhgFZ/Snru1ZGX4r94OgBD33gHJjJqAWTWjchddYPx
BnM7nXNbzHiWuTB8yOz33g/0ccqiEl7RslUjcfUsy4608pplLJ7mKoTemggjeOyb
HgEJnzlbRA6Bf2ia2xK43V34Q3kLyHOtDLSqa0XKVHenry5V3qejs9T7NvPG2A68
IaclHsk5yXoqeytWLaGaCt3wMph4b/dNaiTB8wraFco4o8Q=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:52 2026 by rpki-client